Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
File: kRbcv3jGLVHakHag0Gra027jt1U.cer (raw, json)
Hash identifier: LSc6Epd/T+wvCK45bgJbV1V/1fx81pVlxVz9HkUbIms=
Subject key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C6BC6C672B1A514834E11243C9807BD85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Feb 2026 13:25:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43272
IP: 77.247.248.0/21
IP: 185.177.28.0/22
IP: 2a11:1580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:c6:c6:72:b1:a5:14:83:4e:11:24:3c:98:07:bd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 13:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:a2:c6:81:1a:88:94:e2:85:7a:81:1e:cf:
ab:26:e0:aa:77:ad:bf:eb:4a:63:f8:da:8b:8d:86:
7b:d7:a7:50:51:0e:e8:c7:db:e5:13:97:7a:2b:06:
79:5f:70:78:e3:c7:e4:0b:ae:be:d7:73:bc:de:8f:
de:18:45:d8:31:0f:4e:1d:d5:50:a5:44:70:28:16:
ac:b8:33:90:41:6c:d2:37:1d:11:6e:96:b9:bd:7e:
ff:04:fe:5a:6e:d1:5d:aa:df:bc:06:ca:7a:fb:25:
04:49:3f:8d:e7:25:75:f6:0a:54:d7:eb:9c:52:ed:
64:6d:59:63:cc:b7:45:e8:8f:6b:0c:65:95:df:24:
87:58:c0:82:d2:d1:0f:3a:65:53:cb:e2:89:93:2e:
63:f9:44:30:db:1f:23:7d:8a:f7:f2:31:db:d5:8e:
9f:eb:ca:43:e0:d5:d0:90:31:0f:35:df:f5:90:a4:
4d:d0:84:c8:33:89:72:d2:3e:44:e0:8b:d1:8b:8d:
89:fd:ec:d0:a1:ec:d3:30:4c:76:4e:47:4d:df:7a:
1b:ae:13:ee:8c:51:fd:d2:8e:24:44:f9:95:62:b0:
de:34:e3:d4:7a:d1:75:b8:45:b4:15:ea:53:ef:10:
cf:ae:19:e3:e1:92:ff:d0:9e:dd:a1:4f:f2:19:e3:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.248.0/21
185.177.28.0/22
IPv6:
2a11:1580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43272
Signature Algorithm: sha256WithRSAEncryption
76:77:df:de:24:2a:91:fd:70:cb:93:0d:18:34:9e:1c:fc:5b:
fa:11:3e:91:26:a5:66:ce:ef:cc:71:6a:45:26:56:ca:95:11:
8c:93:29:1a:40:10:3f:b4:b1:ce:6b:d6:cd:c5:92:ba:a8:c9:
56:38:44:40:76:b7:a3:b6:16:c5:15:be:64:61:05:06:5e:2a:
8c:5e:e2:72:64:fb:0c:62:21:93:cb:16:b1:fe:0b:0e:54:5f:
df:50:16:7e:83:1c:60:9d:ba:02:30:c1:49:ec:42:7f:55:d2:
57:d1:dd:ff:d3:cd:97:8f:36:ea:65:77:41:2f:ba:1f:09:e3:
35:8d:0b:86:29:41:95:64:da:6d:2d:f0:57:71:64:a0:ff:e6:
05:5c:9f:cd:c1:bf:95:c4:e5:0c:53:63:99:c8:db:fe:df:bc:
f6:f7:a0:8f:6b:2a:9f:e7:00:d6:39:9a:10:ae:65:09:2b:dc:
f0:fc:0e:55:71:c0:44:17:a9:b7:ac:16:dd:1e:ee:98:7c:d3:
6b:62:19:72:ec:41:40:ec:01:b4:1e:2a:0d:46:44:ee:56:1c:
8f:7d:ce:46:27:0f:7f:cf:d2:c5:55:98:c5:5c:e1:97:b7:51:
af:d8:af:0e:e0:32:c1:04:41:c0:cf:ad:68:6e:c3:f8:19:09:
ef:84:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:32:22 2026 by rpki-client